Cybersecurity Incident Response Analyst

The Cybersecurity Incident Response Analyst is responsible for the response to security incidents, threats and vulnerabilities. Within the Cyber Fusion Center organization, this role requires the ability to fully engage in all phases of the incident lifecycle, including the skills to analyze event logs, computer artifacts, and other data sources to contain and resolve incidents or events, provide recommendations for remediation and determine the root cause.

Why should you join this team?

• You can be part of a dynamic and multicultural team.
• You can be exposed to the inner workings of the Incident Response function within the Global PepsiCo Cyber Fusion Center and gather great experience.
• You can contribute to the team’s knowledge base and create new process improvements.

What kind of manager is Nicolas?

• Nicolas has led the Warsaw IR team for the last 5+ years and has strong background and technical knowledge. You can learn from him how to handle any type of cybersecurity incident while having strong support from the team and leadership. His 10 team members gave him the highest score as a manager for the last years. As a person he is patient, good listener and tolerant.

How do we work and what do we offer?

• We work in a hybrid model (2 days from the office in Warsaw, Plac Konesera, 3 days from home).
• The most important benefits of this position: annual bonus, private healthcare, life insurance, Multisport, private pension plan, employee assistance program.

What are your daily tasks?

• You identify, respond, and mitigate sophisticated threats to PepsiCo computer networks.
• You are conducting incident response activities, including advanced investigation (forensic, malware analyses etc.) in collaboration with specialist teams.
• You are performing the activities necessary for the immediate, short-term rapid resolution of incidents to minimize production down time and risk exposure.
• You maintain a professional communicative relationship with clients and management to provide information throughout the incident, problem, and change management cycles.
• You are coordinating and driving efforts among multiple business units during response activities and post-mortem.
• You are proactively monitoring client environments using specialized security applications
• You provide comprehensive and accurate information to Incident Response Manager for case reporting.
• You participate in after-hours on-call rotation when required, which will be compensated accordingly.

What will you bring to the team?

• 3+ years of work experience in information security, especially in an Information operations / incident role.
• Bachelor's or master's degree in information technology or related discipline.
• You have a hands-on troubleshooting, analysis, and technical expertise to resolve incidents and service requests; previous experience in troubleshooting day-to-day operational processes such as security monitoring, data correlation, security operations etc.
• You have a strong working knowledge of at least three of the following security tools: host-based antivirus, anti-spam gateway solutions, firewalls, IDS/IPS, server and network device hardening, data loss prevention, forensics software, vulnerability management, website security.
• You have competence in using both internal and external ticketing systems for ITIL-based incident, problem and change management.
• You have an ability to work extremely well under pressure while maintaining a professional image and approach.
• Very good English & communication skills
• Well seen are relevant technical security certifications (GIAC, EC-Council, ISC-2 etc.)